Posts of last few hours

ISMG Editors: French Supermarket Hack Weaponized Food
Also: Anthropic Warns That AI Agents Could Spread Across IoT Devices
In this week's ISMG Editors' Panel, four editors discussed the weaponization of food in a cyberattack against French supermarkets, the prospect of self-replicating artificial intelligence agents and why crypto agility matters beyond post-quantum cryptography.
https://ransomware.databreachtoday.com/ismg-editors-french-supermarket-hack-weaponized-food-a-33133
Anthropic Gives AI Safety Evaluators Insider Access
METR Researchers Gain Employee-Level Access to Assess Unreleased Models and Publish Independent Risk Findings
Anthropic, one of the labs that pushed for embedded evaluators, said in a blog post that it is giving the independent evaluator Metr "employee-like access" to its models before deployment. This level of access is close to what Metr said are best practices for its assessors to understand how highly capable models behave.
https://ransomware.databreachtoday.com/anthropic-gives-ai-safety-evaluators-insider-access-a-33134
Prove Claims Former Employees Fueled KYXStart Infringement
Delaware Complaint Targets Two Patents Covering Digital Identity Authentication
Prove has sued digital identity rival KYXStart, alleging that former senior employees helped develop competing identity verification, fraud intelligence and authentication products that infringe two Prove patents, while violating contractual restrictions and undermining its competitive position.
https://ransomware.databreachtoday.com/prove-claims-former-employees-fueled-kyxstart-infringement-a-33135
North Korean IT Workers Used Stolen US Identities to Earn $3 Million
The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American companies. Two US nationals were arrested, 14 people […]
https://securityaffairs.com/201193/intelligence/north-korean-it-workers-used-stolen-us-identities-to-earn-3-million.html
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/
工具调用最小权限与能力降级
https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247497309&idx=1&sn=0fda6be23644c8689ee83758a770b443
小小四的日常
cby: 我想好了，等我退休了，我就做个美食家
https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247490018&idx=1&sn=10e1754abec32a5f72e6d57f73d3696b
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor applications. ConnectWise said in its October 17 update, supplied for […]

The post Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/hackers-use-connectwise-skykick-credentials/
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of
https://thehackernews.com/2026/10/malfex-npm-package-imgdecode-hides.html
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
【安全圈】黑客利用 Collabora RCE 漏洞为 Nextcloud 服务器植入后门
关键词漏洞威胁行为者正在利用 Nextcloud 的 Collabora Online - 内置 CODE S
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079381&idx=3&sn=83fe8f1d0aa273a7e5c0ca6d4a83d64e
【安全圈】Linux内核爆出9.3分超高危漏洞，可“越狱”虚拟机攻击宿主机
关键词高危漏洞Debian 在最新安全公告中，披露存在于 Linux 内核的“关键”（Critical）漏洞，
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079381&idx=2&sn=870c96014815465341569810ecc94d94
【安全圈】程序员为女友抢号搞瘫医院挂号系统
关键词女友身体不好，需频繁就医，热门专家号源紧张，挂号屡屡落空。为帮女友，程序员男友周铭（化名）编写“抢号软件”抢号。
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079381&idx=1&sn=62452dec7ffbb0c77a86ee1e051297e4
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted backup application. The incident shows how one leaked vendor secret can create risk across many organizations when a multitenant app already has wide permissions. The affected product is ConnectWise Cloud […]

The post Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts appeared first on Cyber Security News.

https://cybersecuritynews.com/connectwise-credentials-microsoft-365-accounts/
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: This week, Palo Alto Netwoks researchers reported that PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, […]
https://securityaffairs.com/201178/security/u-s-cisa-adds-fortinet-multiple-products-and-beyondtrust-remote-support-flaws-to-its-known-exploited-vulnerabilities-catalog.html
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US subsidiary of British defense contractor BAE Systems, has taken the Bankruptcy Noticing Center offline since October 9. The Bankruptcy Noticing […]
https://securityaffairs.com/201166/security/bae-systems-cyber-incident-takes-us-bankruptcy-noticing-center-offline-for-a-week.html
一台"锁死"的 Pixel 7 自救记：把 GhostLock 内核漏洞移植到真机 root
看雪论坛作者ID：世界美景
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458622904&idx=2&sn=36915887042b42ce81d9a8043bc026e4
SDC2026议题预告 | 物理世界自动化攻防：Agent 小队无人值守 IoT 漏洞挖掘实践
Agent 小队接入物理层，无人值守挖 IoT 漏洞
https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458622904&idx=1&sn=89006d52e87c01402146d6b270efaa9f
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30 minutes, addressing a cryptographic mystery spanning roughly 25 years. Its October 16 report attributes the seeds to a standard C pseudorandom number generator initialized with Unix timestamps, rather than secret passphrases. Despite […]

The post Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

https://gbhackers.com/anthropics-claude-ai-nsa-provided-cryptographic-keys/

Managed ad